Skill UI

This skill guides the execution of structured purple team exercises, simulating real-world adversary techniques (Red Team) and validating the effectiveness of existing detection rules and controls (Blue Team). It is essential for Security Operations Center (SOC) teams to identify critical detection gaps, optimize analyst response playbooks, and enhance the overall security posture against specific threat actors mapped to MITRE ATT&CK techniques.

Blueprint turns a single objective into an executable, multi-step construction plan tailored for coding agents and multi-session teams, complete with context briefs, review gates, dependency awareness, and installable via `/blueprint <project> <objective>`.

This utility executes atomic Red Team tests mapped to the MITRE ATT&CK framework. It is essential for purple team exercises, allowing security teams to assess detection coverage gaps, validate SIEM/EDR rules, and generate detailed ATT&CK coverage heatmaps. Use it to build continuous detection validation loops and measure blue team visibility against known adversary techniques.

A comprehensive tool that analyzes existing codebases to generate detailed, definitive architectural blueprints. It automatically detects technology stacks, identifies architectural patterns (e.g., Microservices, Clean Architecture), and documents implementation details, including dependency flow, cross-cutting concerns (security, logging), and data models. This ensures architectural consistency, aids in onboarding new team members, and guides future development efforts.

This toolkit automates core email marketing operations for Brevo (formerly Sendinblue) via Rube MCP. Users can manage the complete campaign lifecycle, including listing, updating, and configuring advanced A/B tests. It also provides comprehensive functionality to create, edit, and delete reusable email templates, ensuring streamlined and powerful communication workflows for professional marketing teams.

This comprehensive guide presents three validated architectural blueprints for integrating Adobe services (Firefly, PDF, etc.). It helps developers decide between simple direct SDK integration (suitable for MVPs), native Adobe App Builder (serverless functions), or robust, high-throughput dedicated microservices, based on team size, complexity, and required scalability.

This guide details setting up advanced Command and Control (C2) redirectors, acting as protective intermediaries between implant beacons and the hidden team server. It covers using Nginx and Apache for request filtering based on Malleable C2 profiles, layering Let's Encrypt TLS, and implementing advanced OPSEC controls like domain fronting, geo/UA filtering, and decoy diversion. Essential for red-teaming operations requiring high resilience against blue-team detection and takedown.

Provides a comprehensive framework for blue-team threat hunting and detection engineering. Users learn hypothesis-driven hunting techniques, optimize SIEM queries, and build robust detection rules using industry standards like Sigma and YARA. Essential for minimizing false positives and validating security controls in a defensive posture.

This skill performs comprehensive security audits, including hardening, threat modeling (STRIDE/PASTA), Red/Blue Team exercises, OWASP checks, code review, and incident response. It is designed for infrastructure security across any project. Users should ensure authorization before execution and treat findings as advisory triage rather than proof of exploitability.

Enables agents to perform authorized security assessments, blue team exercises, and penetration testing on AI products, agents, and infrastructure. Uses first-principles reasoning to identify vulnerabilities like prompt injection and tool abuse, generating evidence-based security reports without relying solely on payload libraries.

This toolkit automates core email marketing operations for Brevo (formerly Sendinblue) via Rube MCP. Users can manage the complete campaign lifecycle, including listing, updating, and configuring advanced A/B tests. It also provides comprehensive functionality to create, edit, and delete reusable email templates, ensuring streamlined and powerful communication workflows for professional marketing teams.

Proactive threat hunting and detection engineering using Sigma/YARA rules, SIEM queries, and ATT&CK mapping for blue-team operations. Includes hypothesis-driven workflows, rule validation, and toolchain guidance.